Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35332e302f32342d3234203d3e20323639343536.roa
File:                     34352e3138372e35332e302f32342d3234203d3e20323639343536.roa (raw, json)
Hash identifier:          VepTcX629j1udvcmWCtQPZiDZwqKOuYcWiZjZJ0XhWE=
Subject key identifier:   9D:EC:C2:82:82:03:19:98:E3:65:3D:49:C5:B9:0E:B3:FE:0E:D1:BC
Certificate issuer:       /CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Certificate serial:       71242C47D721AF053E31F65ECBE577A29015D19C
Authority key identifier: 4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35332e302f32342d3234203d3e20323639343536.roa
Signing time:             Tue 26 Dec 2023 15:29:20 +0000
ROA not before:           Tue 26 Dec 2023 15:24:20 +0000
ROA not after:            Tue 24 Dec 2024 15:29:20 +0000
asID:                     269456
IP address blocks:        45.187.53.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:24:2c:47:d7:21:af:05:3e:31:f6:5e:cb:e5:77:a2:90:15:d1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
        Validity
            Not Before: Dec 26 15:24:20 2023 GMT
            Not After : Dec 24 15:29:20 2024 GMT
        Subject: CN=9DECC28282031998E3653D49C5B90EB3FE0ED1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:ee:08:30:7a:73:cc:37:8b:c2:68:db:d1:
                    ba:9f:7e:f0:81:20:e6:a3:b5:5c:fb:c8:f3:2b:55:
                    81:7f:7c:af:97:99:0b:12:04:f6:b2:45:d5:03:d6:
                    c0:af:dc:f2:22:99:bb:08:39:9b:cd:dc:4c:43:92:
                    25:aa:7e:9f:64:b2:45:31:41:13:c1:6a:e5:4c:14:
                    1f:2f:47:00:3b:04:9f:ef:61:4a:95:0b:82:53:66:
                    08:79:a7:71:61:8a:ec:08:87:b5:ab:fe:e7:18:7f:
                    b9:09:9a:34:cc:41:36:fc:80:2e:6b:84:2e:e1:e0:
                    52:7d:a3:5e:c2:c6:e3:ec:70:08:b3:c2:af:78:0e:
                    8f:6f:23:0e:e6:c7:fe:24:3c:ff:de:38:e9:23:14:
                    04:86:ea:cf:93:a9:6e:8c:93:24:c3:df:34:69:56:
                    84:4a:ee:29:7f:3a:f8:0d:24:70:14:44:ca:06:e4:
                    19:c1:c2:0a:ee:ca:55:ec:01:30:21:3a:b8:e7:77:
                    96:99:c0:14:4a:1c:e1:b1:13:38:b7:a3:81:9f:c0:
                    ad:c5:9a:45:37:12:60:07:aa:9c:31:ea:4d:5f:cd:
                    d7:6b:4f:d9:49:e0:9b:20:b1:8d:7f:90:b0:39:b6:
                    0f:20:b9:96:7d:26:9e:97:4f:2d:db:88:e3:cb:90:
                    7b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:C2:82:82:03:19:98:E3:65:3D:49:C5:B9:0E:B3:FE:0E:D1:BC
            X509v3 Authority Key Identifier:
                keyid:4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35332e302f32342d3234203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:ec:d3:53:d2:8d:48:82:8b:f6:12:4e:34:07:46:90:17:
         61:6c:93:b5:bf:20:2b:61:78:6a:10:70:c9:16:88:61:2b:bb:
         72:cc:56:a6:81:6f:3b:0c:de:7a:ac:9a:af:88:42:18:60:33:
         68:7b:15:ea:23:36:70:13:67:31:0e:7a:de:f6:79:39:5c:4e:
         f7:68:98:5d:0d:fb:33:f8:3a:a1:97:6d:bd:fa:7a:f0:32:2d:
         2d:87:c1:0c:35:a2:9c:a5:a0:8c:ff:77:1c:95:63:56:ce:82:
         7b:fc:21:59:c8:a1:e0:48:4b:c2:54:e3:13:15:89:e6:9b:1d:
         7f:27:00:1c:32:a1:63:98:25:c4:20:12:14:cd:d7:93:ba:4e:
         3b:06:a5:d0:7f:53:d5:20:24:1b:bc:b4:41:8c:fd:c0:7a:6b:
         ab:b2:5b:4a:14:de:63:50:cf:8c:65:ca:10:ee:30:45:5c:be:
         e4:3b:3c:43:f9:4e:9e:2e:12:1a:53:3e:4f:b4:32:54:74:13:
         0b:48:6c:1a:6b:e5:b5:a8:e7:87:3c:af:43:ae:a5:ee:5b:a1:
         a6:62:82:42:ee:de:5f:e0:2f:ed:61:a6:e5:31:d8:96:1d:32:
         7a:89:58:ce:85:60:ab:6e:9d:89:73:b5:e9:b1:73:bf:b4:f5:
         07:21:43:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcSQsR9chrwU+MfZey+V3opAV0ZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5NkRENjZGRDc4NUJCRkUwRjE0QjZDODNBN0I1RjY5
RjM3NDM5RTAeFw0yMzEyMjYxNTI0MjBaFw0yNDEyMjQxNTI5MjBaMDMxMTAvBgNV
BAMTKDlERUNDMjgyODIwMzE5OThFMzY1M0Q0OUM1QjkwRUIzRkUwRUQxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLe4IMHpzzDeLwmjb0bqffvCB
IOajtVz7yPMrVYF/fK+XmQsSBPayRdUD1sCv3PIimbsIOZvN3ExDkiWqfp9kskUx
QRPBauVMFB8vRwA7BJ/vYUqVC4JTZgh5p3FhiuwIh7Wr/ucYf7kJmjTMQTb8gC5r
hC7h4FJ9o17CxuPscAizwq94Do9vIw7mx/4kPP/eOOkjFASG6s+TqW6MkyTD3zRp
VoRK7il/OvgNJHAURMoG5BnBwgruylXsATAhOrjnd5aZwBRKHOGxEzi3o4GfwK3F
mkU3EmAHqpwx6k1fzddrT9lJ4JsgsY1/kLA5tg8guZZ9Jp6XTy3biOPLkHurAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnezCgoIDGZjjZT1JxbkOs/4O0bwwHwYDVR0j
BBgwFoAUS5bdZv14W7/g8Utsg6e19p83Q54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBKaU1MZDc3b2tlOWlUU0Rua1UxSHlnWEtxZDdYMmR0OXpxeVBEMWhY
dVIvMC80Qjk2REQ2NkZENzg1QkJGRTBGMTRCNkM4M0E3QjVGNjlGMzc0MzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCOTZERDY2RkQ3ODVCQkZF
MEYxNEI2QzgzQTdCNUY2OUYzNzQzOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwSmlNTGQ3N29rZTlpVFNEbmtVMUh5Z1hLcWQ3WDJkdDl6cXlQRDFoWHVSLzAv
MzQzNTJlMzEzODM3MmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbs1MA0GCSqGSIb3DQEBCwUAA4IBAQApL+zTU9KN
SIKL9hJONAdGkBdhbJO1vyArYXhqEHDJFohhK7tyzFamgW87DN56rJqviEIYYDNo
exXqIzZwE2cxDnre9nk5XE73aJhdDfsz+Dqhl229+nrwMi0th8EMNaKcpaCM/3cc
lWNWzoJ7/CFZyKHgSEvCVOMTFYnmmx1/JwAcMqFjmCXEIBIUzdeTuk47BqXQf1PV
ICQbvLRBjP3AemursltKFN5jUM+MZcoQ7jBFXL7kOzxD+U6eLhIaUz5PtDJUdBML
SGwaa+W1qOeHPK9DrqXuW6GmYoJC7t5f4C/tYablMdiWHTJ6iVjOhWCrbp2Jc7Xp
sXO/tPUHIUOS
-----END CERTIFICATE-----
Generated at Wed Feb 21 00:56:48 2024 by rpki-client on console-ams.rpki-client.org